Unscored severity · published Sep 1, 2009
CVE-2008-7144
Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA,…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Winrar · Rarlab
through 3.70; 2.90; 3.0.0; 3.10; 3.10_beta3; 3.10_beta5; +26 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-7144
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-7144
osvdb.org
http://osvdb.org/43439
Vendor Advisory
http://secunia.com/advisories/29407
www.cert.fi
http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html
www.ee.oulu.fi
http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/
Patch
http://www.vupen.com/english/advisories/2008/0916/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41251
More from Winrar
8.8
CVE-2025-8088
Path traversal vulnerability in WinRAR
7.8
CVE-2025-6218
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
7.8
CVE-2023-38831
RARLAB WinRAR Code Execution Vulnerability
7.8
CVE-2018-20250
WinRAR Absolute Path Traversal Vulnerability
7.8
CVE-2026-14191
WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader